Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
File:                     J38SJEpQvGVO5WP-c5_k63GZZrY.mft (raw, json)
Hash identifier:          ap5FOZo/46IEOGM7PJp4CSHsvX5xvuSj1oHHIG8b1Gk=
Subject key identifier:   52:A9:2A:C2:33:0F:AB:40:67:A2:38:97:15:B0:E8:59:CC:EB:69:07
Authority key identifier: 27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6
Certificate issuer:       /CN=A91B89AA/serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
Manifest number:          4E
Signing time:             Sun 27 Apr 2025 06:14:47 +0000
Manifest this update:     Sun 27 Apr 2025 06:14:47 +0000
Manifest next update:     Sun 04 May 2025 06:14:47 +0000
Files and hashes:         1: J38SJEpQvGVO5WP-c5_k63GZZrY.crl (hash: w4lGJmOUz1Xs0Ea88yB/Jmk21QUtjJVFlMiF1194L18=)
                          2: A719B1F01B0811F08F3C3B09C4F9AE02.roa (hash: +0VuYuGfUe694y8p1nRfDg+dRfTnSFCQz77nwwmEWEw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl
                          rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B89AA, serialNumber=277F12244A50BC654EE563FE739FE4EB719966B6
        Validity
            Not Before: Apr 27 06:14:47 2025 GMT
            Not After : May  4 06:14:47 2025 GMT
        Subject: CN=680dcb57-8d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:46:08:49:c3:6f:f6:58:26:40:61:e6:5c:
                    2f:b5:4c:30:6e:22:cd:c9:46:99:fd:8f:e9:5e:af:
                    76:aa:86:c8:90:ac:b6:97:b9:de:e7:59:90:3e:a6:
                    e9:31:a1:20:c1:37:a8:92:71:a0:e3:d3:8b:1f:aa:
                    4b:3c:ad:7f:8a:46:ce:b0:a3:66:53:20:e6:08:d2:
                    db:0f:d7:33:d6:1c:be:d2:c1:58:78:4e:8e:5d:f9:
                    1e:c5:53:a8:b0:e7:9a:53:c9:e7:f0:34:9e:9c:8d:
                    b0:11:29:3e:b7:c6:a1:50:53:ed:d5:67:cc:88:95:
                    a7:52:1b:44:85:d7:e0:c6:93:4a:99:18:31:eb:72:
                    96:75:4e:6f:28:e1:a2:64:49:0d:3b:fc:00:37:3a:
                    6e:8c:03:7d:4d:dc:10:db:5f:eb:7a:ef:30:02:06:
                    3f:ac:cc:f7:10:82:7f:3e:c0:0a:8c:9e:b0:a9:5d:
                    8e:1f:ba:20:8c:a5:58:da:a2:27:70:42:e0:dc:ac:
                    3c:fb:cd:5e:68:5e:f3:75:96:87:4e:24:27:99:c4:
                    6d:df:af:54:2e:32:3f:15:a2:95:7f:cd:f7:de:a5:
                    a3:9e:e1:26:26:31:56:53:30:89:a3:48:8b:a9:09:
                    04:b5:77:01:47:31:a8:e3:41:29:58:09:e8:a8:00:
                    0a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A9:2A:C2:33:0F:AB:40:67:A2:38:97:15:B0:E8:59:CC:EB:69:07
            X509v3 Authority Key Identifier:
                keyid:27:7F:12:24:4A:50:BC:65:4E:E5:63:FE:73:9F:E4:EB:71:99:66:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J38SJEpQvGVO5WP-c5_k63GZZrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B89AA/85D0F346BC6211EF9A783751C4F9AE02/J38SJEpQvGVO5WP-c5_k63GZZrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d4:26:48:95:7b:6f:a7:9a:88:53:d7:d7:fb:8f:da:8f:a9:
         99:69:40:f9:43:7d:6e:e8:9d:92:72:b5:81:85:bb:1d:89:11:
         93:7f:19:b8:86:68:3e:33:0a:e4:6b:7c:29:57:82:52:38:72:
         ce:9d:86:4c:21:60:c0:90:a0:78:0c:26:af:00:ca:a2:f0:e2:
         d9:02:ab:54:8f:bc:af:43:0e:e5:00:df:d8:2a:3e:a1:13:77:
         32:34:f4:67:85:e0:2c:92:8a:7d:9c:bf:a9:21:37:48:07:67:
         34:50:89:c4:60:9b:a1:41:0d:0d:c5:89:b1:72:12:18:b1:c2:
         a8:1e:17:31:58:27:1d:7a:2c:d8:d5:00:80:f5:88:30:90:ac:
         de:61:8a:05:91:a4:e1:db:cf:a8:97:e7:a9:ec:14:48:e9:53:
         8a:57:3c:dc:4b:86:61:ba:e1:40:6b:6e:97:80:f2:65:5b:21:
         e1:73:a8:3c:b9:15:89:1b:14:0b:24:12:fa:ac:d6:6b:8b:74:
         43:1b:57:72:e4:2d:7c:92:ba:e6:1b:6b:4f:cc:db:57:0c:62:
         13:d2:eb:72:ef:15:ad:37:11:1e:ba:dc:04:dd:1f:55:fe:7e:
         27:4e:a9:63:81:2f:8b:1f:a6:a0:2b:e8:3f:34:03:3c:c4:39:
         8e:18:21:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net